Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/5058C6EEA53C11F096F1C284C4F9AE02.roa
File:                     5058C6EEA53C11F096F1C284C4F9AE02.roa (raw, json)
Hash identifier:          Ut3CDtCW4yFtzwlmPVnhZOKBuebePtbtjUycMS+MqHI=
Subject key identifier:   C5:7A:D8:9F:64:35:63:72:7E:7E:9A:8C:1D:6B:10:AD:58:7A:D4:26
Certificate issuer:       /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Certificate serial:       059D
Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/5058C6EEA53C11F096F1C284C4F9AE02.roa
Signing time:             Thu 09 Oct 2025 18:18:12 +0000
ROA not before:           Thu 09 Oct 2025 18:18:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137868
IP address blocks:        103.170.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
                          rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
        Validity
            Not Before: Oct  9 18:18:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68e7fc63-f720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:78:68:99:8e:1f:aa:d5:ff:6e:d0:3a:31:
                    83:cb:9e:e7:18:fd:4a:a2:be:c7:8d:0a:c5:ac:92:
                    50:16:cd:43:87:0b:a6:bb:09:1f:d4:49:86:97:7d:
                    a7:5e:8a:64:ab:99:96:63:48:1a:49:93:e3:55:79:
                    f6:db:50:b3:60:45:bc:6b:0f:44:cd:cf:eb:96:43:
                    34:e3:73:ee:97:47:b4:d9:e7:56:8e:bf:02:29:92:
                    25:92:90:2a:2f:64:aa:86:cf:1a:9d:bd:42:fb:40:
                    0d:49:70:64:63:d4:34:12:2c:b4:2b:28:73:86:02:
                    93:43:da:33:f4:5b:38:6f:6d:c2:c1:c4:40:1a:c7:
                    3e:7c:e1:3d:30:e9:f2:5f:37:71:4b:80:b0:55:67:
                    87:94:c8:fe:5d:c9:f7:c4:61:07:e6:29:aa:c6:3b:
                    86:47:ee:37:75:da:d2:24:77:ff:69:7f:a0:12:fe:
                    80:c0:84:d2:1e:74:b9:82:8d:47:17:76:4f:ac:56:
                    5d:e9:ae:f8:ce:ce:5f:c0:7d:9e:64:b0:89:de:49:
                    1e:e7:42:23:ad:a2:70:7d:8a:35:59:ff:98:9f:90:
                    49:2c:f6:6e:86:4d:31:8a:f1:2e:a9:e5:bd:af:78:
                    69:13:a0:00:9e:d5:f4:77:d3:9f:41:4a:bd:7c:14:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7A:D8:9F:64:35:63:72:7E:7E:9A:8C:1D:6B:10:AD:58:7A:D4:26
            X509v3 Authority Key Identifier:
                keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/5058C6EEA53C11F096F1C284C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:8a:e5:24:b3:73:a2:f4:72:d5:a2:a4:7d:ec:2e:36:60:4b:
         1e:18:2e:38:81:f2:37:dc:f2:be:12:e2:cd:91:30:a1:5d:0c:
         f1:d0:3d:61:8b:2b:a4:cb:76:d8:08:c2:be:8d:89:5c:f6:27:
         d6:f1:8b:8b:02:b7:86:52:f2:e4:50:13:3b:49:c1:b3:53:57:
         56:d2:2a:d5:01:21:29:1e:a7:2b:4d:ef:cb:0b:28:15:c8:6b:
         a8:78:7e:af:51:08:77:dd:57:5a:95:62:bc:86:b2:6d:2e:32:
         d3:4a:cb:59:59:fc:32:22:29:44:4e:81:56:90:3a:7d:e6:3e:
         05:ba:50:a4:8b:3c:c9:6d:f0:e8:9a:f7:7d:88:3f:fa:73:2f:
         f2:a2:cc:0f:d5:35:f7:d7:2e:d0:fd:b4:d7:66:31:ac:15:03:
         4f:50:f2:41:ee:e1:5f:44:06:a1:90:54:58:de:65:33:63:31:
         fc:3b:31:dc:50:af:71:70:cd:92:ba:53:fa:5e:98:e0:fc:bb:
         88:3e:70:24:30:8a:6d:03:d8:4d:0f:1e:19:5b:7d:ea:c3:6c:
         2c:85:25:c9:a9:47:32:8e:ae:ea:25:ad:58:86:30:29:c1:0a:
         be:ab:6d:d0:05:74:e8:50:94:43:a0:bd:b2:9f:3b:a2:e0:99:
         5e:8b:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:47:55 2025 by rpki-client